Closed Bug 776353 Opened 12 years ago Closed 12 years ago

gc() and "--ion-regalloc=greedy" do not get along

Categories

(Core :: JavaScript Engine, defect)

Product:
Core
Component:
JavaScript Engine
Platform:
x86_64
macOS
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED WONTFIX

People

(Reporter: jruderman, Unassigned)

References

Details

(Keywords: assertion, regression, testcase, Whiteboard: [js:t]) 

./js --ion-eager --ion-regalloc=greedy

for (var j = 0; j < 2; ++j) {
    gc();
}

Assertion failure: addr % Cell::CellSize == 0, at js/src/gc/Heap.h:826

The first bad revision is:
changeset:   868eafc7deae
user:        David Anderson
date:        Thu Feb 02 00:58:23 2012 -0800
summary:     Trigger invalidation on GC (bug 708455, r=cdleary).
Whiteboard: [js:t]
Status: NEW → RESOLVED
Closed: 12 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.